Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Using L7 to block embedded video and audio traffic

    Scheduled Pinned Locked Moved Traffic Shaping
    12 Posts 6 Posters 16.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      chuksonpfsense
      last edited by

      I wouldn't know what "RFC 2616 traffic" is but i meant like embedding video in ".flv" format in a web page. Check this site for example:

      http://www.chelseadaft.org/

      The video at the right side of the page starts playing as soon as you open the page. That's the kind of embedded video i'm looking to block.

      Thank you

      1 Reply Last reply Reply Quote 0
      • M Offline
        markuhde
        last edited by

        @chuksonpfsense:

        I wouldn't know what "RFC 2616 traffic" is but i meant like embedding video in ".flv" format in a web page. Check this site for example:

        http://www.chelseadaft.org/

        The video at the right side of the page starts playing as soon as you open the page. That's the kind of embedded video i'm looking to block.

        Thank you

        That's not what those profiles block.

        1 Reply Last reply Reply Quote 0
        • C Offline
          chuksonpfsense
          last edited by

          What kind of traffic does "httpvideo" block then? I looked at the .pat file of the profile, i discovered that the code is same with what is used to block such embedded videos in mikrotik routers, infact i have used it and successfully block such videos.

          Any suggestion on how to block or filter such embedded video?

          Thanks.

          1 Reply Last reply Reply Quote 0
          • E Offline
            eri--
            last edited by

            You have to tweak the number of packets sent up to the layer7 daemon.
            Normally its sendign only 5 [packets which might not be enough for the regex to match.

            1 Reply Last reply Reply Quote 0
            • C Offline
              chuksonpfsense
              last edited by

              how and where do i do the tweaking?

              does it mean after tweaking, i can use the "httpvideo" protocol?
              please a little more insight so i can get it done.

              1 Reply Last reply Reply Quote 0
              • A Offline
                abubin
                last edited by

                have you tried using flash instead in L7 filter?

                I am trying to limit bandwidth for youtube right now. I am using L7 with flash and httpvideo. It seems to be working in causing the videos not to load. I am actually trying to limit the bandwidth with 2m line. But instead, the videos just doesn't load for me. Once I disable that filter, youtube works again. So I am pretty sure that one of those filters are blocking youtube.

                1 Reply Last reply Reply Quote 0
                • F Offline
                  Fehler20
                  last edited by

                  I can confirm, that httpvideo catches YouTube Video traffic. Maybe you have to specify WAN, because the regex maches the Response, not the request.

                  have you tried using flash instead in L7 filter?

                  I am trying to limit bandwidth for youtube right now. I am using L7 with flash and httpvideo. It seems to be working in causing the videos not to load. I am actually trying to limit the bandwidth with 2m line. But instead, the videos just doesn't load for me. Once I disable that filter, youtube works again. So I am pretty sure that one of those filters are blocking youtube.

                  I was able to configure this Scenario with 2.1beta. So theoretically it should be possible :).

                  1 Reply Last reply Reply Quote 0
                  • A Offline
                    abubin
                    last edited by

                    hmm..any notable problem with 2.1beta? If no major problem then I will upgrade to it. Else I have to stick with stable release.

                    1 Reply Last reply Reply Quote 0
                    • F Offline
                      Fehler20
                      last edited by

                      Have now tried with 2.0.3. It works, too. Only difference to your config is that I filter both wan and lan.

                      Or maybe your ethernet nic is not compatible with queues.

                      1 Reply Last reply Reply Quote 0
                      • A Offline
                        abubin
                        last edited by

                        i am currently using 2.0.3.

                        IP limit is working when I limit them to IP addresses. Only when I use limit on L7 youtube and flash, it cause that problem. Any idea how I can check what is the exact problem? Should I post my configs here? BTW, I am using LIMITER in the L7 config not QUEUE.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.